您如何使某个属性真正只读？

Question

Take the following property:

public string Foo
{
   get;
   private set;
}

Using reflection, I can still set the value of this property from outside the owning class. Is there a way to prevent this? Removing the set accessor is not an option as it must be WCF friendly.

Answer 1

Jon Skeet says :

You can't (AFAIK) stop reflection being used in a situation where the caller has "full trust". If they're running with less than full trust then some things about reflection (if not all) are automatically disabled, I believe - however, if this is to stop other people from calling some code, you can't prevent them from running your code with full trust unless you're in control of their box in the first place.

Answer 2

一个非常丑陋的解决方案是使用StackTrace类来验证只有您自己的类中的方法才能调用setter。

Answer 3

You could obfuscate the code. This would make it hard to reflect on it.